Global Privacy Policy

Effective Globally across 220+ Countries & Territories | Last Updated: October 2026 | Operator: KLS Communication

1. Data Minimization & Information We Collect

We process only operational data strictly required to establish secure handshakes and deliver messages:

• Account Identifiers: Your email address and optional mobile phone number, processed solely for identity validation, authentication, and secure one-time password (OTP) account recovery.
• Unique Pseudonym (UID): An assigned alphanumeric user identifier (e.g., USER-9508) that allows users to communicate without exposing public personal profiles.
• Encrypted Communications: Messages and file payloads are transmitted over Transport Layer Security (TLS 1.3) and stored in partition-isolated storage to ensure synchronization across your authorized devices. Delivery markers (is_delivered, is_read) are processed exclusively to provide delivery state indicators.
• Real-time VoIP Signaling: Call session coordination data (offers, answers, ICE candidates) is transiently exchanged through p2p_signaling tables to establish direct WebRTC audio connections and is cleared when a call terminates.
• Connection PIN Tokens: User-configured static or 30-minute auto-expiring dynamic PINs used to prevent unsolicited spam connection requests.

2. Mobile Device Permissions & Hardware Usage

In accordance with global platform standards and Google Play developer requirements, our hardware and runtime permissions are strictly scoped to user-requested real-time features:

• Contacts Access (android.permission.READ_CONTACTS): If granted by the user, this permission is used strictly on-device to match registered Green Chat phone numbers with names in your local address book. This allows the app to show your saved contact names in chat lists, call history, and incoming call alerts. Your full contact list is never uploaded in bulk, never stored in centralized profiling databases, and never sold, rented, or transferred to third parties or advertisers.
• Microphone (android.permission.RECORD_AUDIO): Used exclusively during active voice calls to transmit voice packets. Calls are transmitted peer-to-peer and are never recorded or stored on our servers.
• Notifications (android.permission.POST_NOTIFICATIONS): Used to deliver alerts for incoming calls, connection requests, and real-time chat messages.
• Biometric Security (USE_BIOMETRIC): Used locally to secure application access via your fingerprint. Raw biometric telemetry remains encrypted within your device's hardware enclave (Android Keystore) and is never accessible to Green Chat or transmitted off-device.

3. Information We Never Collect or Sell

Regardless of your geographic location, Green Chat enforces strict prohibitions:

• No Data Sales or Commercial Profiling: We do not sell, rent, trade, or monetize your personal information under CCPA/CPRA, GDPR, or any other global framework.
• No Location Tracking: We never log, demand, or track real-time GPS coordinates.
• No Third-Party Advertising Trackers: We do not embed ad-network analytics SDKs, cross-app trackers, or behavioral profiling tools.

4. Worldwide Regional Privacy Rights

Residents across all 220+ supported countries and territories maintain enforceable rights regarding their data:

5. International Cross-Border Data Transfers

To support global real-time message delivery across all time zones, infrastructure data may be routed through secure, ISO/IEC 27001-certified cloud infrastructure. When transferring technical identifiers across international borders, we ensure equivalent protection through standard contractual clauses (SCCs) and robust TLS 1.3 encryption.

6. Data Retention, Auto-Purging & Self-Service Erasure

You retain absolute control over your digital footprint directly inside the application:

• Clear Today's Chat: Erases chat records generated during the current calendar day for the selected contact.
• Delete All Chat: Permanently deletes the entire conversation history between you and the selected contact.
• Account Deletion (Right to Erasure): Initiating account deletion triggers an automated grace period, after which all profile records, login credentials, chat records, and signaling logs are irreversibly purged from our databases.

7. Children's Privacy (COPPA & Global Standards)

Green Chat is not intended for or directed toward children under 13 years of age (or under 16 within the European Economic Area). We do not knowingly collect personal information from minors. If we discover that a minor has created an account, all associated credentials and records are deleted immediately.